{"id":1910572,"url":"https://alion.io/job/shorepoint-principal-system-architect-sme","title":"Principal System Architect / SME","company":{"id":3901776,"name":"ShorePoint","domain":"shorepoint.com","url":"https://alion.io/company/shorepoint","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":98000,"max_usd":229000,"period":"year","method":"global_role_seniority_cell","sample_n":1037},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"FedRAMP","optional":false},{"name":"GCP","optional":false},{"name":"PKI","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-05T10:56:15Z","employer_posted_date":null,"last_verified_at":"2026-10-05T10:56:15Z","board_verified":false,"closed_at":null,"days_open":27,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":27},"description":"Who we are:ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a “work hard, play hard” mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community. \nThe Perks:As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual’s technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers. Highlighted benefits include 144 hours of PTO, 11 holidays, 85% of insurance premiums covered, a 401(k), continuing education, certification maintenance and reimbursement and more.\nWho we’re looking for:We are seeking a Principal System Architect / subject matter expert (SME) to lead an enterprise Post-Quantum Cryptography (PQC) program for a federal agency and help establish the technical direction for transitioning from classical to quantum-resistant cryptography. This hands-on team lead role provides day-to-day direction to senior architects and engineers, supports workload coordination and partners with government stakeholders to advance PQC migration, crypto-agility and enterprise cybersecurity architecture. The Principal System Architect / SME position requires enterprise security architecture expertise, technical leadership and the ability to communicate complex program status, progress and value to technical teams and leadership. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.\nWhat you’ll be doing:\nLead and technically supervise a team of senior systems architects and engineers, providing daily direction and mentorship.\n\nAdvise the project manager on workload distribution and staffing across the systems team.\n\nShape and support the agency’s PQC migration strategy in alignment with National Institute of Standards and Technology (NIST) post-quantum standards and Commercial National Security Algorithm (CNSA) 2.0 requirements.\n\nLead and conduct cryptographic inventory and discovery efforts to identify systems, protocols and data stores exposed to quantum decryption risk, including “harvest now, decrypt later” threats.\n\nEstablish crypto-agility standards to enable systems to transition between classical and post-quantum algorithms with minimal re-architecture.\n\nAdvise on hybrid classical/PQC implementation approaches to protect systems during the migration period.\n\nEvaluate NIST-selected PQC algorithms, including ML-KEM, ML-DSA and SLH-DSA, for suitability across enterprise use cases, performance constraints and system requirements.\n\nGather and develop enterprise cybersecurity architecture requirements with federal stakeholders, building on analysis from information engineers.\n\nProduce design architectures covering software, hardware and communications that meet current needs and anticipate future cross-functional requirements and interfaces.\n\nDesign, implement and baseline enterprise cybersecurity capability configurations.\n\nValidate and verify capability implementations and ongoing configuration changes to confirm they meet intended security outcomes.\n\nDevelop policy aligned with Cybersecurity and Infrastructure Security Agency (CISA) maturity models, including the Zero Trust Maturity Model and NIST standards while ensuring architectures remain compatible and compliant with industry and federal standards.\n\nFoster collaboration across government and contractor teams to identify clear paths forward across key task areas.\n\nDevelop briefings, presentations and written deliverables that communicate program status, risk reduction and value to technical teams and agency leadership.\n\nWhat you need to know:\nPQC standards, including NIST-selected ML-KEM (FIPS 203), ML-DSA (FIPS 204) and SLH-DSA (FIPS 205) algorithms and the CNSA 2.0 suite and transition timelines.\n\nCrypto-agility principles, hybrid cryptographic implementation strategies, public-key infrastructure (PKI), key management and certificate lifecycle management in the context of cryptographic modernization.\n\nEnterprise cybersecurity architecture across software, hardware and network communications, including configuration baselining, validation and verification practices.\n\nFederal cybersecurity frameworks and guidance, including NIST Special Publication (SP) 800-series publications, the NIST Cybersecurity Framework and CISA maturity models and how to translate federal policy and mandates into technical requirements and architecture decisions.\n\nEnterprise network architecture and cryptography across segmentation, routing, secure transport protocols and supporting infrastructure components, including identity and access management systems, directory services, load balancers, firewalls and hardware security modules (HSMs).\n\nCloud, hybrid and multi-cloud security architecture, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), Software as a Service (SaaS), cloud key management, shared responsibility models, Federal Risk and Authorization Management Program (FedRAMP) requirements and cryptographic dependencies across applications, operating systems, firmware and third-party products.\n\nMust have’s:\n10+ years of experience in systems architecture, including providing technical supervision and direction to senior architects and staff.\n\nActive Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification.\n\nExperience designing and implementing enterprise cybersecurity architectures and capabilities.\n\nExperience developing enterprise cybersecurity architecture requirements with customers and stakeholders.\n\nExperience baselining enterprise cybersecurity capability configurations and validating and verifying implementations and ongoing configuration changes.\n\nExperience creating policy that adheres to CISA maturity models and NIST standards.\n\nExperience with PKI, key management and certificate lifecycle management.\n\nProven ability to lead teams, build collaboration across stakeholders and communicate complex technical topics to technical and executive audiences through briefings, presentations and written deliverables.\n\nProven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.\n\nApplicants must currently be a U.S. citizen in compliance with federal contract requirements.\n\nBeneficial to have:\nExperience designing and implementing enterprise cybersecurity architectures that include PQC.\n\nHands-on experience with PQC standards, including ML-KEM, ML-DSA, SLH-DSA and CNSA 2.0 requirements.\n\nExperience conducting cryptographic inventories and assessing “harvest now, decrypt later” risk exposure.\n\nHands-on experience piloting PQC or hybrid key exchange in TLS, VPN/IPsec, SSH or code-signing environments.\n\nExperience with automated cryptographic and network discovery tools, including mapping cryptographic dependencies across large environments and building Cryptographic Bills of Materials (CBOMs).\n\nFamiliarity with FIPS 140-3 validation, HSMs and vendor PQC readiness roadmaps.\n\nFamiliarity with federal PQC policy drivers such as National Security Memorandum 10 (NSM-10), Office of Management and Budget (OMB) Memorandum M-23-02 and CISA PQC guidance.\n\nExperience supporting cybersecurity work for federal government customers, including developing enterprise cybersecurity architecture requirements.\n\nExperience implementing Zero Trust architecture in a federal environment.\n\nExperience with major federal cloud platforms such as Amazon Web Services (AWS) GovCloud, Azure Government or Google Cloud for Government.\n\nProject Management Professional (PMP) certification.\n\nCloud security certifications such as AWS Certified Security - Specialty, Azure Security Engineer or Certified Cloud Security Professional (CCSP).\n\nBachelor’s or Master’s degree in Computer Science, Cybersecurity, Mathematics, Engineering or a related field.\n\nit’s done:Remote (Herndon, VA).\nOriginally posted on Himalayas","description_format":"text","description_chars":8708,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Blockchain & Crypto"],"lifecycle":[{"event":"open","at":"2026-10-05T14:28:00Z"}],"visa":[],"liveness":{"score":49,"band":"ok","label":"Likely open","p_open":0.85,"p_active":0.764,"p_room":0.75,"age_days":26,"expected_fill_days":28,"reasons":["seen:26","win:late"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/shorepoint-principal-system-architect-sme","json_url":"https://alion.io/job/shorepoint-principal-system-architect-sme.json","meta":{"generated_at":"2026-11-02T05:34:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8088,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3901776},"rest":"https://alion.io/mcp/rest/get_company?id=3901776"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fshorepoint-principal-system-architect-sme"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fshorepoint-principal-system-architect-sme"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fshorepoint-principal-system-architect-sme"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/shorepoint-principal-system-architect-sme\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fshorepoint-principal-system-architect-sme"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1910572}},{"tool":"search_jobs","arguments":{"company":"shorepoint.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1910572},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}